Abstract
Mobile communication is becoming the mainstream with the rapid growth of mobile devices penetrating our daily life. More and more mobile devices such as mobile phones, personal digital assistants, notebooks etc, are capable of Internet access. Mobile devices frequently change their communication IP addresses in mobile IPv6 network following its current attached domain. This raises a big challenge for building firewall for mobile devices. The conventional firewalls are primarily based on IPv4 networks where the security criteria are specified only to the fixed IP addresses or subnets, which apparently do not apply to mobile IPv6. In this paper we propose three solutions for mobile IPv6 firewall. Our approaches make the firewall adaptive to dynamic IP addresses in mobile IPv6 network. They have different expense and weight corresponding to different degree of universality. The paper focuses the study more from practical aspect.
Chapter PDF
References
Johnson, D., Perkins, C., Arkko, J.: Mobility Support in IPv6., IETF RFC 3775 (June 2004)
Le, F., Faccin, S., Patil, B., Tschofenig, H.: Mobile IPv6 and Firewalls: Problem Statement. IETF RFC 4487 (May 2006)
Thomson, S., Narten, T.: IPv6 Stateless Address Autoconfiguration. IETF RFC 2462 (December 1998)
Droms, R., et al.: Dynamic Host Configuration Protocol for IPv6 (DHCPv6). IETF RFC 3315 (July 2003)
Arkko, J., Devarapalli, V., Dupont, F.: Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents. IETF RFC 3776 (June 2004)
Narten, T., Nordmark, E., Simpson, W.: Neighbor Discovery for IP Version 6. IETF RFC 2461 (December 1998)
Deering, S., Hinden, R.: Internet Protocol, Version 6 (IPv6) Specification. IETF RFC 2460 (December 1998)
Narten, T., Draves, R.: Privacy Extensions for Stateless Address Autoconfiguration in IPv6. IETF RFC 3041 (January 2001)
Aura, T.: Cryptographically Generated Addresses (CGA). IETF RFC 3972 (March 2005)
Qiu, Y., Zhou, J.Y., Deng, R.: Security Analysis and Improvement of Return Routability Protocol. In: Burmester, M., Yasinsac, A. (eds.) MADNES 2005. LNCS, vol. 4074, pp. 174–181. Springer, Heidelberg (2006)
Linux HOWTO: ip6tables
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2007 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Qiu, Y., Bao, F., Zhou, J. (2007). Firewall for Dynamic IP Address in Mobile IPv6. In: Qing, S., Imai, H., Wang, G. (eds) Information and Communications Security. ICICS 2007. Lecture Notes in Computer Science, vol 4861. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-77048-0_36
Download citation
DOI: https://doi.org/10.1007/978-3-540-77048-0_36
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-77047-3
Online ISBN: 978-3-540-77048-0
eBook Packages: Computer ScienceComputer Science (R0)